Author: Admin

A sophisticated new phishing tool dubbed “Astaroth” has emerged on cybercrime platforms, boasting advanced methods to bypass two-factor authentication (2FA). First advertised in January 2025, the kit employs session hijacking and real-time credential interception to compromise accounts on Gmail, Yahoo, Office 365 and other platforms. According to SlashNext researchers, Astaroth operates through an evilginx-style reverse proxy, placing itself between users and legitimate login pages.  This allows it to capture usernames, passwords, 2FA tokens and session cookies without…

Getting ready for agentic wars? Analysts also said that SAP’s strategy to champion BDC as the foundational data layer is another step towards getting ready for the agentic wars — a phase where rival vendors such as Salesforce, Oracle, Microsoft, Workday, and ServiceNow, among others will try to get a majority share of enterprises’ expenditure. “Enterprises are already using multiple products across their businesses. If an enterprise uses both Salesforce and SAP across different departments,…

It’s all about patterns. Long before cybersecurity was on anyone’s radar, defensive intelligence – like catching an enemy spy in your ranks – was about being able to recognize patterns and interpret their meaning correctly. Security’s reliance on pattern recognition and interpretation is no less true in the age of cyber. And nowhere is it more true than in the world of SaaS. In SaaS, you are what you do. In the SaaS environment, identity…

Losses to romance baiting, or pig butchering, scams increased 40% year-on-year (YoY) in 2024 to comprise a third of total crypto fraud revenue, according to Chainalysis. A day before Valentine’s Day, the blockchain analytics company revealed the darker side of dating apps, in the latest chapter of its 2025 Crypto Crime Report. Romance baiting typically occurs when vulnerable individuals are approached on dating sites, before being groomed by scammers and then persuaded to invest in…

Russian state cyber-actor Seashell Blizzard has engaged a specialist initial access subgroup to increase its ability to compromise high-value targets globally, according to a new Microsoft report. The multiyear operation has enabled Seashell Blizzard to expand its reach and achieve persistent access in global targets across sensitive sectors. These target sectors include energy, oil and gas, telecommunications, shipping, arms manufacturing and governments. Previously, initial access efforts by Seashell Blizzard have predominantly focused on Ukraine and…